sp12ct-lendik-biz-prasor-favmel[.]pages[.]dev

The domain sp12ct-lendik-biz-prasor-favmel.pages.dev is currently flagged as an active generic phishing site with an elevated risk rating. Independent threat‑intel feeds have listed the domain on multiple blocklists, including PhishDestroy and OpenPhish, indicating that it has been observed distributing phishing content. VirusTotal analysis shows that 13 out of 91 security vendors have raised detections against the domain, reinforcing the malicious classification. The domain also appears on two additional public blocklists, confirming its presence in broader defensive ecosystems.

Infrastructure details beyond the domain name are sparse. No public registrar information, IP address, hosting provider, ASN, or SSL certificate data have been disclosed in the available intelligence. Consequently, the underlying server location and any associated command‑and‑control infrastructure remain unverified. The lack of observed page title or brand targeting further limits attribution, and the content of the landing page has not been captured in the current dataset.

Given the confirmed listings by reputable phishing‑specific blocklists and the modest but notable vendor detections on VirusTotal, defenders should treat the domain as malicious. Recommended actions include adding the fully qualified domain name to network‑level deny lists, updating URL filtering policies to block any HTTP/HTTPS requests to the domain, and monitoring DNS logs for any resolution attempts. Organizations employing endpoint protection should ensure that the domain is included in threat‑intelligence feeds and that alerts generated by the 13 detecting vendors are escalated according to incident‑response procedures. Continuous re‑evaluation is advised, as additional infrastructure details may emerge if the site becomes more active or if further analysis tools capture the page content.